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SUMMARY 

This paper presents a review of the environmental and design constraints 
along with some Insight into the established design and quality assurance 
practices that apply to Low Earth Orbit (LEO) space flight hardware. It is 
intended as an introduction for people unfamiliar with space flight 
considerations. Some basic data and a bibliography are Included. Figures 
from the literature are provided as examples of information that is available. 

INTRODUCTION 

This paper presents the basic design constraints that pertain to space 
flight hardware. It includes guidelines applicable to the development of 
payloads for expendable launch vehicles (ELVs) and the space shuttle payloads. 
This information is familiar to all space engineers, but the need exists for a 
primer for those new to the field. The reader is cautioned that much of this 
paper reflects the author's convictions. The prospective space engineer is 
encouraged to become more familiar with the literature to form his own opinions 
on the subject. 

There are many aspects of the established design procedure for space 
flight hardware that at first glance appear unduly Byzantine; however, this 
approach has developed over the years to meet the challenges of space flight 
and has proved to be very successful. (See fig. 1.) Designing hardware for 
space use has unique problems that must be carefully addressed, and common 
design practices have evolved to ensure success. Recently, many small shuttle 
payload engineers have relearned the lessons of space flight hardware design 
from hard experience. (See Ridenoure, 1987.) The obstacles listed in, this 
paper may be avoided by the discerning and prepared space engineer. 

The most obvious difference between other hardware designs and space 
flight hardware designs is the effect of the space environment (vacuum, low 
gravity, radiation, etc.) on hardware. A second class of equally difficult 
challenges is presented by the limitations Imposed by the launch vehicle. It 
currently costs thousands of dollars per pound to put a payload in orbit, so 
designing for minimum weight is critical. Other constraints, such as volume 
and power, arise directly and indirectly from the launch vehicle. The third 
general constraint, which is responsible for much of the intricacies of the 
space flight design process, is reliability. There is little or no 
opportunity for servicing space hardware in the event of a failure. This 
means the hardware must be designed and tested so that it either will not fail 
or will tolerate likely failures. The costs of reliability coupled with the 
cost of launch are what make space flight hardware so expensive. An automobile 
can be used as an example of the importance of reliability. If one bought a 
new car and then had to discard it at the first failure, such as a clogged 
filter, fouled spark plug, or flat tire, the economics of car ownership would 


not be very attractive (especially if coupled with gasoline costs of $100 per 
gallon). In space, the luxury of readily available and affordable servicing 
does not currently exist. 


ENVIRONMENTAL CONSTRAINTS 

Environmental effects are usually grouped into the following categories: 
(1) ground and prelaunch, (2) launch and ascent, and (3) space. For returning 
spacecraft, a fourth category of reentry must also be considered, but this last 
category will not be addressed in this paper. 

Ground and Prelaunch Environments 

Before jumping to the difficulties of the space environment, it is 
important to remember the more mundane environments that the hardware will 
see before launch. These include ground handling and storage environments, 
transportation environments, and launch site environments. Some specific 
considerations include the following: (1) electrostatic discharge due to 

handling; (2) shock, (e.g., Impact due to dropping), vibration, temperature 
range, atmospheric pressure drop, and humidity due to transportation; and 
(3) effects of the launch environment such as salt spray, moisture, 
temperature, sand and dust, fungus and mold growth, and lightning. If the 
effects of these environments are ignored, the design may never have the 
opportunity to prove itself in space. 

The above conditions are most likely experienced by nonoperating 
hardware. Operating conditions on the ground must also be considered. For 
example, if the hardware has the potential for operating in an explosive 
atmosphere (e.g., due to a leak in a tank in a nearby system), safety 
considerations may require that the design be explosion proof. Verifying an 
explosion proof design can add significant expense to development costs. 

Electrostatic discharge (ESD) refers to the possibility of damage to 
electronic devices due to a discharge of static electricity. This effect is 
not limited to space flight designs, as ESD susceptible parts (such as 
Complementary Metal Oxide Semiconductor technology, or CMOS, which is 
attractive for its low power consumption) are now commonly used in industry. 

(See table I.) All low level or signal level parts should be handled with 
care and the possibility of hidden damage should not be overlooked. 

Launch and Ascent Environment 

The launch environment varies with the launch vehicle. All launch 
vehicles impose acceleration on payloads (on the order of 5 or 6 g for an 
unmanned launch vehicle and about 3.5 g for the space shuttle). Considerable 
vibration is also present. For design, analysis, and testing purposes this 
vibration is typically split into the following three components for design, 
analysis, and testing purposes: (1) quasi-static or sine, (2) random, and 

(3) acoustic. Vibration environments are typically specified by spectral 
density. (See fig. 2.) The vibration that a piece of hardware will 
experience depends on where and how the hardware is mounted. Acoustic 
environments translate into vibration as sound pressure variations excite the 
structure. Acoustic vibrations vary depending on the shape of the hardware 
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and material used. Shock due to pyrotechnic devices (such as for spacecraft 
separation) Is also a consideration. 

On ascent there Is some temperature rise due to aerodynamic heating and, 
of course, a pressure drop. The pressure profile is Important for vented 
enclosures and especially for operating electronics. The Paschen Law relates 
sparking potential to pressure. The possibility for arcing in electronics of 
even moderately high voltage occurs at low pressures encountered at some point 
on the ascent pressure profile. This is only one of the reasons for 
encapsulating electronics with an Insulating material (known as conformal 
coating). Sealed enclosures are possible, but they become pressure vessels in 
vacuum, and maintaining the integrity of the seal Is a challenge. A leaking 
sealed enclosure will eventually evacuate and could implode if returned to a 
pressurized environment. 


Space Environment 

The vacuum of space turns out to be a substantial factor in space hardware 
design. Although vestiges of the atmosphere cause significant aerodynamic drag 
over time In LEO, the vacuum in LEO is better than In vacuum chambers on Earth. 
The principal Impacts on design are in heat transfer, material migration, and 
materials degradation. 

The thermal environment in space presents a challenge to the thermal 
engineer, but to the Individual hardware component manifests itself as a 
radiation and conduction problem with a fairly wide temperature range. (See 
fig. 3.) It is Interesting to note that a spherically shaped gray body in 
orbit will have an average temperature of around 20 to 40 °C. However, 
temperatures reached by sun-facing or deep-space-facing surfaces will differ 
by a large amount and wide variations can take place as components move in and 
out of sunlight. Many thermal cycles will be experienced as most spacecraft 
go Into eclipse once every orbit. Components on the fringe of the spacecraft 
(e.g., solar arrays) can experience extremely large temperature fluctuations. 
Low power dissipation electronic components are preferred because heat 
rejection capability is limited by the radiator size. A significant degree of 
thermal control can be achieved by the proper selection of surface coatings. 
(See table II.) 

Without gravity there is no buoyancy-driven convection (although there 
may be surface-tension-driven convection), so heat transfer must be by 
radiation or conduction (even in sealed containers). Fans are a possible 
solution to provide convection in sealed containers, but they require power, 
represent a failure mode, and do not help if the container leaks. 

With the absence of convection, most practical heat removal from a 
hardware component is via conduction and radiation. For electronic piece 
parts, conduction is the primary mode of heat removal. Design for conduction 
heat transfer usually entails good thermal conductivity and contact throughout 
the system (e.g., using large mounting areas with many bolts and even the use 
of thermally conductive fillers or adhesives). The area of conduction via 
bolted joints in vacuum could benefit from more application-oriented research. 
Although heat pipes or active thermal control systems are possible, reliability 
and integration considerations do not encourage their use. 
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Low-g material migration is a problem of floating and wandering bits of 
contamination with electrically conductive material being especially 
troublesome (another reason for conformal coating of electronics). Extensive 
cleanliness and contamination control efforts are required. Material migration 
in vacuum includes the problems associated with outgassing, low vapor pressure 
metals, contamination, and lubrication. Outgassing is the release of material 
such as the evaporation of volatile components or the di sabsorption of 
entrained materials. This outgassing can cause problems if the outgassed 
material is deposited on optical or thermal control devices that rely on 
surface optical properties to work. Outgassing in a confined area could result 
in a pressure rise that exceeds the critical Paschen Law pressure which would 
result in arcing. High vapor pressure metals, such as cadmium, grow whiskers 
in vacuum which can cause electrical shorts (e.g., between connector pins). 
Choosing a lubricant requires special care in vacuum because many common 
lubricants become Ineffective or migrate away from where they are needed and 
become contaminants, while the surfaces to be lubricated will then gall or cold 
weld. 


Materials degradation arises from exposure to radiation and to atomic 
oxygen in LEO. The main types of radiation that can damage materials are 
ionizing radiation, protons, and ultraviolet radiation. Radiation effects are 
not as much a concern on the ground because the Earth's atmosphere provides 
attenuation. The Earth's trapped radiation belts are a source of proton 
problems especially around the South Atlantic Anomaly, which is the name of a 
dip in the inner-radiation belt over South America. Electronics are 
susceptible to a total dose of radiation that will cause total failure and are 
also susceptible to temporary failures called single event upsets (SEU) or "bi 
flips" caused by an ionizing particle passing through a particular location or 
a chip (like a memory cell). Unpredictable radiation bursts can come from 
solar flares. Atomic oxygen in low orbits will attack susceptible external 
surfaces and can cause thermal system degradation, so proper materials must b« 
selected for exposed surfaces. 


Spacecraft charging is an interesting effect that arises from space p 1 as 
electrons charging dielectric surfaces. (Voltage differences of 10 000 V are 
possible in eclipse.) Subsequent discharges from these potentials can cause 
electronic system upsets. The harmful effects of charging can be avoided if 
proper design practices are followed (e.g., ensure proper grounding and bondi 
and provide conductive external surfaces). 

One aspect of the LEO environment that is steadily getting worse and wi 1 
present severe problems in the future is the presence of orbital debris. 
Meteoroids and micrometeoroids are of some concern; however, with the advent 
of space flight, manmade debris from launch vehicles and spacecraft is 
becoming a major hazard. The major design Impact is the need for shielding, 
which adds costly weight. The required shield weight depends on the acceptab 
probability of penetration of debris, which in turn depends on the distributi 
of debris particles. At present, the debris environment is not accurately 
characterized except that it is growing worse. There are many shielding desi 
equations in the literature and they differ considerably. 
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DESIGN CONSTRAINTS 


The principal design constraint for flight hardware Is weight. (Although 
this Is properly referred to as mass, engineers tend to talk about weight and 
It Is less confusing to stick with the argot.) There Is a limit on the amount 
of payload weight that a launch vehicle can place in orbit. There is also a 
center of gravity (c.g., more properly center of mass) limitation on the 
payload due to launch vehicle bending moments. 

These severe weight restrictions necessitate extreme measures to reduce 
weight. Mass properties are watched closely throughout the stages of system 
design and development with the maintenance of a weight budget. The weight 
margin, governed by the project manager, is whittled down over the course of 
the project's development as subsystems fail to meet their weight allocations 
due to underestimates or unforseen problems. This happens despite using 
elegant and sophisticated design practices (e.g., by using lightweight 
materials or chemically milling components to minimum allowable thicknesses). 
Factors of safety are typically pushed to their lower limits because of weight 
constraints. The solutions to many design problems also tend to add weight. 
Weight is an underlying consideration in nearly all aspects of space design. 

Electrical power is a commodity that is also closely watched by project 
management. A power budget similar to the weight budget is kept. The 
limitation on power is directly connected to weight. The power subsystem 
tends to be very heavy due to items like batteries, and power requirements are 
controlled carefully to keep the power subsystem weight down. Most spacecraft 
obtain electrical power from solar cell arrays, which are limited in output by 
weight and size constraints. They only produce power in sunlight and so must 
be augmented by batteries to provide power in eclipse. Thermal dissipation is 
also a consideration in power constraints. 

Volume Is limited by the launch vehicle shroud. (See fig. 4.) Items such 
as antennas and solar arrays are launched folded-up and deployed on orbit. In 
the stowed configuration they are latched to prevent damage due to acceleration 
and vibration. Mechanisms for latch release and boom extension are major 
In-line reliability items for the entire spacecraft and are therefore carefully 
designed. Pyrotechnic devices are typically used In areas where high 
reliability is needed, such as separation from the launch vehicle. 

A consumables budget is kept for such items as propellants. Spacecraft 
life Is usually limited by the amount of propellant carried and ranges 
typically from 1 to 10 years. Even at 250 n mi altitude, there is significant 
atmospheric drag which causes orbit decay which shortens the life of the 
spacecraft or increases the need for propellants to provide thrust for drag 
compensation. The longer the life, the more challenging the reliability goal 
because of the greater time available for a failure to occur. 

Because there are typically many electronic boxes in close proximity and 
with shared power buses, electromagnetic compatibility (EMC) is an Important 
issue. Electromagnetic interference (EMI) is hard to design out other than 
using commonly accepted packaging, grounding, bonding, and shielding practices. 
Electrical and electronic boxes are usually tested for EMC individually to some 
interference limits, but frequently compatibility problems are not apparent 
until the whole system is tested together. EMI is usually divided into two 
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major categories: whether the box is susceptible to EMI and whether the box 

causes interference. In both cases, there is a further subdivision as to 
whether the interference is radiated (electromagnetic waves) or conducted 
(e.g., noise on the power bus). 

The amount of data that can be downlinked to the ground is limited, 
sometimes by spacecraft systems (e.g., antenna size or amplifier power) or by 
relay systems. As an example, the multiple access data rate of the NASA 
Tracking and Data Relay Satellite System can be up to 50 kilobits per second. 
Not all of the data capacity is necessarily available for the science payload 
as some of the data allocation will probably be devoted to housekeeping data. 
Housekeeping data is used to determine the status and health of the various 
subsystems, to determine failure causes, and to provide for engineering and 
operational needs. Uplinked commands are similarly a limited commodity and 
are usually closely managed along with the data requirements. 

Finally, and perhaps most importantly, are considerations of safety, 
reliability, and quality assurance (SR&QA). Costs to launch a payload are 
high, costs to design and build space hardware are excessive, and costs to 
repair hardware in space are currently unthinkable. One cannot afford to have 
a failure In orbit because there is no cheap, easy way to fix hardware in 
orbit. The design has to be reliable and fault tolerant, and faults should 
not propagate. Hardware or system redundancy is one method used, but the 
ever-present weight constraint must be considered. All failure causes and 
modes have to be analyzed and their effects determined during the design 
stage. For these reasons, reliability winds up being a major cost driver. 

Safety has to be kept in mind throughout the design process. For 
unmanned spacecraft, safety is a primary concern during ground operations and 
launch. Hazardous materials should be avoided because of the possibility that 
a launch failure could introduce these materials into the environment. Range 
safety may require destruct devices on dangerous items such as propellant 
tanks. Servicing of hardware on the launch pad Is to be avoided. High 
pressure systems pose a hazard and are not usually fully loaded until 
personnel are finished working In the area. Ground cable and plumbing 
connections, known as umbilicals, are available on the launch pad to handle 
safety functions and ground operations. 

The formal safety review process is just that, a review. The safety 
committee will review the design to determine if everything possible has been 
done to ensure a safe design, but will not generally tell how to design the 
system to be safe. In manned space flight (shuttle) the safety constraints 
are rigid and overriding. Safety becomes a major driver in system design and 
forces many trades to be done in other areas in order to accommodate required 
redundancy or fault tolerance. 

DESIGN AND QUALITY ASSURANCE PRACTICES 

The basic approach used to develop flight hardware is to (1) design 
carefully, (2) analyze and verify the system on paper, (3) test thoroughly 
(perhaps by building and destructively testing a qualification item or system), 
and (4) rigidly control the flight hardware build and test process to conform 
to the paper design. An incredible amount of paperwork is generated by a 
flight project. There is a common saying that if all the paper on a flight 
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project were stacked up, there would be no need for a launch vehicle to get to 
orbit. 

Once a document is established, it is placed In configuration control. 
Because of the interrelationships of all the parts of a complex system, it is 
important to document, review, and control any and all changes to the design. 
The formal configuration control process holds the system together. 

Simplicity should be the guiding light for the design engineer. The 
simpler design is usually more reliable. There are so many other complicating 
factors that arise from design constraints and system interfaces that it is 
Important not to Introduce unnecessary complications. Pyrotechnic actuators 
are an example of a simple, reliable device for one-shot applications that are 
commonly used on spacecraft. 

Because of the way a "minor" change can ripple through the system design, 
detailed analysis is performed throughout the design process in order to get 
the paper as perfect as possible. Because weight constraints dictate low. 
safety factors, detailed static and dynamic structural analysis and modeling Is 
performed. Fracture control, stress corrosion, and fatigue must be accounted 
for. Thermal analysis and modeling, stress analysis, hazard analysis, and 
reliability analysis are performed in detail. Usually a "reliability number", 
related to the probability of success, is developed for parts and then for 
systems (e.g., per MIL-HDBK-21 7) ; it is Important to keep in mind that this 
number is not absolute, but is only useful in making relative comparisons. 

Interfaces (e.g., for power, data commands, fluids, etc.) between the 
spacecraft, carrier, launch vehicle, and ground services must be carefully 
defined. It Is usually difficult to add or modify an Interface after the 
negotiations between the various parties have been completed and the interfaces 
defined. Sometimes a spacecraft will make an allocation of power, commands, 
data, etc., which become a design constraint for the component in question. 

As with most complex and expensive system designs, there is a detailed 
and formal design review process. First there is a concept review at the 
beginning of the design process to determine what the system is to accomplish 
and how to go about it. It is vital to determine and document the requirements 
for the system as a whole, as well as for the individual components, as early 
as possible. There are so many other constraints that it is prohibitively 
expensive to figure out each step as it is reached. This may seem to be a 
given, but it is rare that a project starts out with adequately defined 
requirements . 

Because of the myriad design considerations, a trade study approach is 
taken. The various considerations (weight, reliability, power, thermal, 
component availability, etc.) have to be traded off against each other. This 
is done with an eye to minimizing the loss or "hit" to each while optimizing 
the total system. Trade studies crop up continually as one or another budget 
gets into trouble or the solution to a problem necessitates increased weight 
and/or power consumption. 

A Preliminary Design Review (PDR) is held to review preliminary versions 
of drawings, specifications, plans, analysis, design criteria, and supporting 
documents. The PDR provides a check that the design is going in the proper 
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direction before starting the involved process of filling In and documenting 
all the details of the design. Typically the PDR Includes an overall system 
specification, subsystem specifications (which cover large subsets of the 
system), and individual component specifications. 

A Critical Design Review (CDR) is held to review the finished design in 
detail. This Includes final versions of drawings, specification changes, 
detailed procedures for testing and operation, detailed analysis and modeling, 
and a truckload of supporting documentation. Everything is done on paper 
first. The emphasis is on getting the paper design right, testing and 
verifying it, and then carefully controlling the hardware throughout its life 
according to the design documentation. 

The paper mill does not stop with the design. As the flight hardware is 
built and tested, documentation is generated recording every aspect of the 
hardware's life. All parts and materials used have a paper trail back to their 
origins so that bad lots can be found and excised. The trail follows them 
throughout their life to ensure they have been properly stored and tested and 
that they are not stressed. Parts and materials of unknown origin are not even 
allowed in the vicinity of flight hardware. All occurrences, tests, material 
exposures, environmental exposures, and any other relevant information about 
the history of a piece of hardware is recorded in a log so that any future 
failure can be properly analyzed and its cause determined. 

To verify the design, qualification units are built exactly corresponding 
to the design documentation and are Identical to flight units except that 
their purpose is to qualify the design for the environments to be experienced 
by the flight units. These units are tested to their limits and are even 
destroyed by the testing. In cases where the safety factor has been kept 
large enough, a protoflight approach can be used where the qualification unit 
Is not overstressed in testing and is used for flight. 

Testing Includes vibration, shock, thermal-vacuum (fig. 5), EMI, operating 
life, proof or burst pressure, and tests for all environments and requirements 
in the specification. Thermal-vacuum tests subject the hardware to thermal 
cycles in vacuum between the specified extremes and check for outgassing; they 
may Include a pump-down test to simulate ascent. Test results are documented 
In detail and analyzed. Acceptance tests to verify workmanship are performed 
to levels generally less than the qualification tests to avoid overstressing 
the units and using up their useful life, but are nearly as extensive. 

A preship review is held after the hardware is built and tested to review 
test results, failures and problems, and changes and to determine if the 
hardware is ready to be shipped to the launch site. Of course, procedures for 
ground operations at the launch site are well documented. 

PARTS, MATERIALS, AND PROCESSES 

Parts, materials, and process design considerations require significant 
engineering effort to avoid system failures. The Government-Industry Data 
Exchange Program (GIDEP) provides data on failures from many projects. 
Publications such as GIDEP Alerts are a good source for application experience 
and potential problem information. Goddard Space Plight Center's "Materials 
TIPS" is an excellent source of information for spacecraft applications. 
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Some typical materials problems Include the following: Incompatible 

materials, attack by solvents and cleaning agents, change In properties due to 
age or environments (e.g., radiation damage and atomic oxygen attack), 
expansion and shrinkage, defects, delaminatlon, poor adhesion. Inadequate 
plating or coating, embrittlement, mercury contamination, stress corrosion, 
fatigue, etc. 

Incorrectly designed or Implemented processes can cause failures. 

Soldering of electrical connections Is a good example of a process that can 
seriously affect reliability. Good soldering, according to NHB 5300-4 (3A-1), 
requires the following: good workmanship (certification is usually required), 

proper environmental conditions, facility cleanliness, proper tools and 
equipment, properly selected materials (solder, flux, solvents), proper 
preparation of conductors, proper part mounting, application of the proper 
amount of solder, removal of residue, and inspection. Stress relief and 
materials compatibility are important. Detailed logs are kept to document 
exact soldering conditions for each assembly, and the amount of the paper 
Involved In assuring quality soldering is enormous. 

Electrical, Electronic, and Electromechanical (EEE) parts pose a special 
challenge to the space engineer. There is a NASA Standard EEE Parts List, 
MIL-STD-975, but the list is very limited and tends to lag behind the state of 
the art by many years. (See table III.) This is because the standard parts 
are usually those with a flight history (l.e., they have flown in space). In 
the space business, once something has flown, it becomes Imbued with a magical 
aura of success. This Is understandable as flight Is the ultimate test. 
However, in the case of parts, this aura is dangerous as performance depends 
on the application of the part and also on the degree to which the part 
manufacturing process remains the same. A standard part may not be right for a 
particular application and may not meet certain requirements. For example, the 
standard parts list had not yet addressed radiation susceptibility in its 
recent Revision G. 

Military specifications and standards are frequently used in space flight 
projects in all design disciplines. NASA "Grade 1" parts correspond to "S 
level" military parts and are acceptable for flight use. "Grade 2" parts 
correspond to military "B level" parts. The Joint Army Navy (JAN) 
specifications cover high reliability military EEE parts. There are military 
specifications and qualified parts lists (QPLs) covering various types of 
parts (e.g., MIL-M-38510 for microcircuits, MIL-S-19500 for transistors and 
diodes). Not only the part, but the manufacturer must be certified to get on 
a QPL. "Slash Sheets" are issued for individually approved parts that are 
appended to the specification. The test methods specified by the QPLs are 
given in MIL-STD-883. MIL-STD-883C not only specifies test methods, but also 
lists requirements that a part must meet in order to use the term MIL-STD-883 
in advertising. Thus, a MIL-STD-883 part is "better" than a commercial part, 
but is still a nonstandard part. Military specifications and standards are 
frequently used in space flight projects in all design disciplines. Testing 
and screening of non-QPL parts can help build confidence in their use to some 
degree, but use of a nonstandard part usually entails a lot of paperwork. 

Table IV shows the current relationship between NASA standard parts and 
military specifications. In the near future. Application Specific Integrated 
Circuits (ASICs) will cause a rethinking of parts qualification. It may be 
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desirable to qualify a programmable logic device In the exact configuration In 
which It will fly rather than allowing a generic qualification. MIL- 1-38535 
specifies Qualified Manufacturer's Line (QML) requirements, which essentially 
qualify a process independent of the types of parts being built. Although 
QMLs were conceived to support ASICs, they may wind up being used to make 
near-Level B parts. 

CMOS electronic parts are desirable because of their Inherent low power 
consumption, but they are susceptible to ESD and radiation effects. In some 
CMOS parts, a parasitic SCR (silicon controlled rectifier) can be activated by 
a power glitch or cosmic ray causing potentially destructive "latch-up." 
Anomalous "bit-flips" (SEU) can occur due to charged particle radiation passing 
through the device. NMOS (n-channel Metal Oxide Semiconductor) devices are 
generally more susceptible to total dose radiation damage, some failing after 
exposure to doses less than 1000 rad (si). 

Parts are derated to avoid stressing. (See table V.) Appendix A of 
MIL-STD-975 gives a general guide to derating, but each particular application 
of a part has to be examined to determine the proper derating. (For example, 
capacitive load versus inductive load could make a difference as to the amount 
of derating necessary for a relay.) Worst case analysis is performed on the 
circuit to determine if any parts could be overstressed in each particular 
application. A thermal analysis identifies hot spots and calculates junction 
temperatures for individual parts. Wire and fuse selection and sizing have to 
be carefully considered for use in the unusual thermal environment of space. 

The same conservatism that makes flight-proven parts acceptable applies 
to flight hardware in general and, at the electronic box level, makes more 
sense because the application situation may not vary as much. This has led to 
several efforts in the past to develop standardized hardware that could be 
used on many different spacecraft. To make something that is all things to 
all people is to make it so expensive that no one can afford to use it. It is 
also hard to make trades when working around standard hardware with fixed 
weight and power specs. If the hardware is not exactly right for an 
application, the design engineer may have to make some modifications that can 
wind up being as expensive as designing a new item. Conservatism will lead to 
the standard item being older, proven technology with its higher weight and 
power limitations. The adage "if it works, don't touch it" points out the 
difficulties of modernizing. On the face of it, standardization appears to 
offer savings in development costs, design time, and the possibility of 
quantity buys. Unfortunately, it has not worked out that way. Each spacecraft 
has its own unique problems and solutions. This is not to say that one must 
start from scratch on each design; it is helpful to use as much existing design 
as possible from other projects. For example, 28 V dc power systems are 
frequently encountered, so it is best to stick with that voltage to allow the 
use of existing electrical/electronic boxes. 

CONCLUDING REMARKS 

This paper lists some of the major problem areas and provides a 
bibliography for a starting point for those unfamiliar with space hardware 
design. The design of hardware for space flight use is really a rather 
straightforward job once all the unusual design constraints have been 
recognized. At this time, space engineering depends on experienced people who 
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have learned their lessons the hard way; the design criteria Is just now 
starting to become well documented In the literature. Hopefully, In the 
future It will not be as difficult to dig up the little tidbits of Information 
that are needed to stay out of trouble In even the simplest design situations. 
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attempt to record the knowledge of the first generation of spacecraft 
engineers. SP-8105 is a typical survey monographs which may serve as 
an overview of the area, but does not contain much detail. 

Get-Away Special (GAS) Small Self-Contained Payloads Experimenter's Handbook, 
NASA Goddard Space Flight Center, Special Payloads Division. 

An overview of the GAS concept in vugraph format with facing page 
text. Contains some basic tips and interesting shuttle environment 
data. 

JSC-07700, Vol . XIV, Space Shuttle Systems Payload Accommodations, 1986. 

This document purports to tell you everything you always wanted to 
know about the Shuttle. It contains descriptions of accommodations 
for and requirements on payloads (see especially Attachment 1, ICD 
2-19001, the generic interface control document). Must reading for 
Shuttle payload engineers. 
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SLP/2104, Spacelab Payload Accommodations Handbook 

A kind of Vol . XIV for Spacelab, this document contains some useful 
tidbits for general use, such as the guidelines for wire sizing. 

High Energy Astronomy Observatory, Mission C, Phase A. NASA TM X-64652, 
vol s . 1 - 3, 1972 

A fairly complete documentation of the Phase A design of the HEAO-C 
spacecraft. Contains a helpful amount of detail on the design of the 
various subsystems even though it is a conceptual design document 
because It builds on the two previous HEAO designs. 

Space Environment 

Jursa, A.S., ed.: Handbook of Geophysics and the Space Environment. Fourth 

ed. Air Force Geophysics Laboratory, 1985. 

A general overview of the space environment. 

Lehmann, J.; Tanner, S.G.; and Wilkesson, T., eds.: The Shuttle Environment 

Workshop. (Rept. 24-5087 Systematics General Corp.; NASA Contract NAS5-27362.) 
NASA CR- 170496, 1983. 

Contains data on shuttle environments from the early flights. 

Leger, L.J.; Vlsentlne, J.T.; and Kumlnecz, J.E.: Low Earth orbit Atomic 

Oxygen Effects on Surfaces. AIAA TP-84-0548, Jan. 1984. 

Contains additional data on atomic oxygen effects from STS-5 and 
STS-8 flights. 

Cour-Palals, B.G.: Hypervelocity Impact Investigations and Meteoroid Shielding 

Experience Related to Apollo and Skylab. Orbital Debris, NASA CP-2360, 1985, 
pp. 247-275. 

There is a dearth of hard data In this area. This paper presents 
some useful information. 

Watts, J.W., Jr.; and Wright, J.J.: Charged Particle Radiation Environment for 

the Spacelab and Other Missions in Low Earth Orbit - Rev. A. NASA TM X— 73358 , 
1976. 


Estimates of the radiation environment in LEO. 

Purvis, C.K. et al.: Design Guidelines for Assessing and Controlling 

Spacecraft Charging Effects. NASA TP-2361, 1984. 

A general overview of design criteria for spacecraft charging with an 
extensive bibliography. 
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Parts, Materials, and Processes 

Material Branch, NASA GSFC: Materials TIPs for Spacecraft Applications. NASA 

Goddard Space Flight Center. 

A compendium of miscellaneous Information that makes for fascinating 
reading. 

Tirado, J.S.; and Hi-rel ICs: A Class of Difference. Electronic Engineering 

Times, no. 15, July 11, 1988, pp. T24-T48. 

A good introduction to the world of military parts. 

McNulty, P.J.: Radiation Effects of Electronic Systems, Proceedings of the 

Air Force Geophysics Laboratory Workshop on the Earth's Radiation Belts, 

Jan. 26-27, 1981, R.C. Sagalyn, W.N. Spjeldvik, and W.J. Burke, eds., Air Force 
Geophysics Laboratory, Hanscom, MA, 1981, pp. 99-124. 

A good introduction to radiation effects on electronic parts. 

Although the paper Is dated, standard electronic parts are also 
dated. 

MIL-STD-975G, NASA Standard Electrical, Electronics, and Electromechanical 
(EEE) 

Parts List. 

The EEE parts that many space hardware designs are required to use. 

Parts, Materials and Processes Experience Summary, vol . 2, NASA SP-6507, 1973. 

A compendium of information from the Government-Industry Data 
Exchange Program (GIDEP). A handy reference, but the GIDEP ALERT 
reports are more entertaining and timely. 

MIL-HDBK-5, Metallic Materials and Elements for Aerospace Vehicle Structures, 
Rev. D, 1983. 

MIL-HDBK-17, Plastics for Aerospace Vehicles, Rev. A, 1971. 

Data on structural properties of materials. 

Zerlaut, G.A.; Carroll, W.F.; and Gates. D.W.: Spacecraft Temperature-Control 

Coatings: Selection, Utilization, and Problems Related to the Space 

Environment Spacecraft Systems. Proceedings of the 16th IAF Congress, vol. 1, 
M. Lunc and D. Cauthei r-Vi 1 1 ard , eds., Gordon and Beach, New York, 1966, 
pp. 259-313. 

An introduction to thermal control. Although dated, it appears to 
be the source of the ubiquitous figure showing the avaiiability of 
materials to provide various combinations of optical properties. 
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Safety, Reliability, and Quality Assurance 


Rldenoure, R.W.: A Systems-Level Performance History of Get Away Specials 

After 25 Space Shuttle Missions. The 1986 Get Away Special Experimenter's 
Symposium, L.R. Thomas and F.L. Mosier, eds., NASA CP-2438, 1987, pp. 79-86. 

A fascinating summary of GAS payload performance with a list of 
failure causes. It appears that GAS payload designers relearned a 
good deal of space engineering the hard way. 

KHB 1700.7, Space Transportation System Payload Ground Safety Handbook. 

Presents the detailed safety requirements a payload and ground 
support equipment (GSE) must meet during ground operations. 

NHB 1700.7, NASA Headquarters, Safety Policy and Requirements for Payloads 
Using the Space Transportation System. NASA TM-80469, 1979. 

Presents the safety policy for the STS. 

MIL-STD-1 540B, Test Requirements for Space Vehicles. 

Describes the kind of testing that could be required for a 
space-flight program. 

Bloomqulst, et al . : On-Orbit Spacecraft Reliability. PRC R-1863, Planning 

Research Corporation, 1978. 

Contains failure rate estimates based on historical spacecraft 
rel iabi 1 i ty data. 

Electromagnetic Compatibility, ESP, and Bonding 

MIL-STD-461B, Electromagnetic Emission and Susceptibility Requirements for the 
Control of Electromagnetic Interference. 

Presents basic box level EMC requirements. Class A2 covers 
spacecraft. 

MIL-STD-462, Electromagnetic Interference Characteristics, Measurement of. 

Descriptions of the tests to be performed to determine if a unit 
meets the requirements of MI L— STD-46 1 . 

DOD-STD-1686, Electrostatic Discharge Control Handbook for Protection of 
Electrical and Electronic Parts, Assemblies and Equipment (Excluding 
Electrically Initiated Explosive Devices). 

Includes an overview of ESD. 

MIL-B-5087B, Bonding, Electrical, and Lightning Protection, for Aerospace 
Systems. 


Spacecraft requirements are usually for Class R bonding. 
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Hawkins, K. : Space Vehicle and Associated Subsystem Weight Growth. Presented 

to 47th Annual Conference of the Society of Allied Weight Engineers Inc., 
Detroit, Michigan, May 23-25, 1988. 

Contains some historical data on weight growth of spacecraft from 
concept to launch. 

Military documents may be available from: 

Naval Publications and Forms Distribution Center 
5801 Tabor Avenue 
Philadelphia, PA 19120-5099 
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TABLE I. - PART CONSTITUENTS SUSCEPTIBLE TO ESD 
[From DOD-HDBK-263 . ] 


Part Constituent 

Part Type 

Failure Mechanism 

Failure Indicator 

COS Structures 

HOS FKT (II Inc retell) 
hos xcs 

Semi conductors with mein’I- 
ization cross-overs 

Digital ICs (Bipolar and 
HOS) 

I.inenr 10s (Bipolar and 
HOS) 

MOS Capacitors 
Hyhr Ids 
Linear ICs 

Dielectric breakdown from 
excess voltage and subse- 
quent high current 

Short (high leakage) 

Semiconductor Junctions 

Diodes ( PN , PTN , Schottky) 

Transistors, Bipolar 

Junction Field KfFect 
Trans i blots 

Thyr I si or s 

Bipolar ICs, Digital and 
L in ear 

input Protection Circuits 
on : 

Discrete HOS FETa 

hos res 

Microdif fusion from mlcro- 
plasma-secomlary breakdown 
from excess energy or heat 

Current filament growth by 
silicon and aluminum dif- 
fusion (el ectromigrat ion) 



Film Res 1 store 

Hy hi id 1 Ch : 

Thick Film Resistors 
Thin Film Resistors 

MoiiulJ title IC-Thln Film 
Res 1st ors 

Encapsulated Film Ke - 
s 1 st ors 

Dielectric breakdown, 
vo 1 luge dependent -crea - 
lion of now current paths 

Joule beating-energy de- 
pendent - tlesl met Jon of 
minute current paths 

Resistance shift 

Metallization Strips 

Hybrid M's 

Mono! It h Ic ICs 

Multiple Finger Overlay 
Trans i st ors 

Joule heat lug-energy de- 
pendent met a 1 1 1 zu t 1 on 
burnout 

Open 

Field Effect Structures 
and 

Nonconduct J ve Lida 

LSI and Memory ICs employ- 
ing ttonconducL ive quartz 
or ceramic package lids 
especially ultraviolet 
EPROMS 

Surface Inversion or 
gate threshbnld voltageB 
shifts from ions deposit- 
ed on surface from ESI) 

Operational degradation 

Piezoelectric Crystals 

Crystal Oscillators 

Surfuce Acouat Ic Wave 
Dev icea 

Crystal fracture from 
mechanical forces when 
excessive voltage is 
appl led 

Operational degradation 

Close 1 y Spaced 
HI ec t rode a 

Surface Acoustic Wave 
Devices 

Thin inctal unpassivated, 
imp rot ec L cd semiconductors 
and mic roc i rcu It s 

Arc discharge melting and 
fusing uf elect rode metal 

Operational degradat Ion 
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TABLE II. - PARAMETERS FOR SELECTED SPACECRAFT 
SURFACE MATERIALS 

[From NASA SP-8027, spacecraft radiation torques, 

Oct. 1969.] 


Material 

Reflectance, 
0.6 to 2.0 microns 

Emit Lance 

at room temperature, 
1 micron 

Solar 

absorptance 

White paints 


0.79 to 0.93 

0.33 

White painu exposed to Sun 


.82 to 92 

,59 

BUck painu 


.88 to .91 

.94 

Black painu exposed to Sun 


.84 to .87 

.98 

White painu after nuclear 
radiation 



J5 

Inorganic paint 



.10 

Inorpnk paint after nuclear 
radiation 



.23 

Aluminum film 


.0! 

-07 

Silver film 


.01 

.05 

Gold film 


.01 

.19 

Copper film 


.01 

.17 

ftjtmum film 


.03 

.24 

Sandblasted aluminum 

0.4 to 0.7 

.2 

.42 

Sandblasted stainless steel 


.85 

.75 

Aluminum foil 


.04 

.12 

lncond foil 


.1 

J8 

Inconel X foil 


.15 

.66 

Chemically polished beryllium 

.4 to .9 

.10 

SO 

Alumina 

£ To .98* 



Zirconium oxide 

.8 to 98 c 

.03 


Magnesium oxide 

.82 lo % 

.04 


Thorium oxide 

.8 to 94 l 

06 


Steel with various finishes 

.15 to 8 V 



Oxidized stainless steel at 
600“ C 




Oxidized stainless steel at 

1000* c 


.4 


Bare n-on-p solar cell 

J2 to .31 

J at 149* C 



(.4 to 1.0 micron) 



SiO-coated solar cell 

.01 to .16 




(.6 to 1 .0 micron) 




"Adapted from rrf&. 21 a«id 26. 

*V*lun arc approximate, intended to K- mdkahw and iH>t f,* dctiftn uv 
*8**0* 0 6 rr-KTon. « durp devreav in ftfu (jik'c occurs 
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TABLE III. - EXAMPLE OF STANDARD PARTS LISTED IN MIL-STD-975G 

[Note the "slash sheet" numbers and the lack of Grade 1 parts. 
Parts policies must account for the unavailability of high 
rel 1 abi 1 Ity parts. ] 


MIL M 38510. MICROCIRCUITS 
Microprocessors 


Coninerc i a 1 
Part No. 
1/ 

Word 

Size 

(Bits) 

Tixerl 

Instruction 

Technology 

Case 

Size 

Clock 
F reguency 
(Max } 

JAN Part Number 2/ 

M385I 0/ 

Grade 1 

Grade 2 

Z80A 

8 

Yes 

NMOS 

40-pin DIP 

4 MMz 

48001 


B*X 

ZB002 

16 

Yes 

NMOS 

40 -pin DIP 

4 MMz 

52002 


B*X 

Z80O2A 

16 

Yes 

NMOS 

40 -pin DIP 

5 MMz 

52004 


B*X 

8086 

16 

Yes 

NMOS 

40-pin-Dlf* 

5 MMz 

53001 


B*X 


1/ Use the JANM38510 part number for ordering. 

7 / The * is for choice of package style. The X is for choice of lead finish. Refer to the QPL for 
speci f ic choices . 


TABLE IV. - EEE PARTS CORRESPONDENCE 


MILITARY QPL (See Note at Bottom) 


DIODES & 


NASA STANDARD 

ICs 

TRANSISTORS 

CAPACITORS 

RESISTORS 

Grade 1 
MIL -S-38510 
Level S 

MILS- 19500 
JANS 

Establ ished 
Reliability (ER) 
Level S (or R) 

Establ ished 
Reliability (ER) 
Level S (or R) 

Establ ished 
Reliability (ER) 
level S (or R) 

Grade 2 

Level B 

JANTXV 

Level P 

Level P 

Non-standard 

Std. Military 
Drawings 
MIL-STD-883C 
MIL- 1-38535 QML 
Source Control 
Drawing (SCD) 
Commercial Parts 

JANTX 

JAN 

Level M 
Level L 

Level M 
MIL R- 1 1 


JAN - Joint Army Navy 

QML - Qualified Manufacturer's List 


Note: The NASA Standard EEE Parts are a subset of the military QPL parts; that is, not all military Level B parts are 

acceptable NASA Standard Grade 2 parts. 
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TABLE V. - EXAMPLE OF A DERATING GUIDE FROM 
MIL-STD-975G, APPENDIX A-l a 


|wi re 

nerate to - Amperes Maximum 

Remarks 

Size 



. 


(AWG) 




30 

0.7 

1.3 


28 

1.0 

1.8 


26 

1.4 

2.5 


24 

2.0 

3.3 

1. Current ratings for bun- 




dies or cables are based 

22 

2.5 

4.5 

on bundles of 15 or more 
wires at +70°C in a hard 

20 

3.7 

6.5 

vacuum. For smaller 
bundles, the allowable 

18 

5.0 

9.2 

current may be propor- 
tionally increased as 

16 

6.5 

13.0 

the bundle approaches 




a single wire. 

14 

3.5 

19.0 

2. Deratings listed are for 

12 

11.5 

25.0 

Teflon insulated wire 
(TYPE TFE) rated for 

10 

j 16.5 

33.0 

+200°C. 

8 

23.0 

44.0 

a. For 150°C wire, use 


j 


80% of value shown 

6 

| 30.0 

60.0 

in table. 

4 

j 40.0 

81.0 

b. For 135°C wire, use 




70% of value shown 

2 

50.0 

L 

108.0 

in table. 

0 

f 

j 75.0 

147.0 

c. For 105°C wi re, use 


1 


50% of value shown 

00 

1 87. § 

169.0 

| in table. 


a These guidelines should be used as minimum 
derating criteria and should be evaluated 
for applicability on a case-by-case basis. 
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LAUNCH SERVICES AGREEMENT 


PRELIMINARY 

FLIGHT 

ASSIGNMENT 


PAYLOAD INTEGRATION PLAN 


CARGO INTEGRATION REVIEW 


FLIGHT DESIGN 
A FLIGHT OPS 
IMPLEMENTATION 


LAUNCWIANDING 

SUPPORT 

PREPARATION 


FLIGHT 

VERIFICATION 

ANALYSIS 


PAYLOAD READINESS REVIEW 


FLIGHT READINESS REVIEW 


P05TFLIDHT HARDWARE A DATA DISTRIBUTION 


ENGINEERING 
DESIGN 
» ANALYSES 


PIP ANNEXES 


PAYLOAD 
STRUCTURAL A 
THERMAL MODELS 


FIGURE 1. - SHUTTLE PAYLOAD INTEGRATION PROCESS. (FROM REF. 5.) 


RANDOM 

VIBRATION 



LOG Ha 

FIGURE 2. - VIBRATION ENVIRONMENT FOR SHUTTLE PAYLOADS. 
(FROM REF. q.) 



Della fl Atlas/Centaur Titan III 


Dual P/L 

Sinrjlo P/L . 



payload onvolopo • \ A3. 7 in dia. 

payload onvolopu 


FIGURE 3. - AN EXTREME EXAMPLE OF THERMAL CYCLING EXPERT FIGURE <1. - TYPICAl PAYLOAD ENVELOPES. 

ENCED ON ORBIT IS GIVEN BY THIS PLOT OF THE TEMPERATURE 
OF THE NIMBUS 2 SOLAR ARRAYS. THE BODY OF THE SPACE- 
CRAFT HAS MORE MASS AND CAN BE INSULATED TO MO [CRATE THE 
SWINGS IN TEMPERATURE. (FROM NASA SP-807q, SPACECRAFT 
SOLAR CELL ARRAYS. MAY 1971.) 
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760 1 * 10 ' 


lOff torr 



‘Chomber evocual'on aboul 2 hour* io flme tcofe i* dlipioportionot* b*r« . 

*Th* plot thowi 12 hour* for eoeh temperature Inanition; actually, the tromlllon period* vary' widely with ipoeeerofl , 
minion , ond l e si equipment. 


FIGURE 5. - TYPICAL THERMAL-VACUUM TEST CYCLE FOR PROTO- 
TYPE SPACECRAFT. (FROM NASA SP-8105, SPACECRAFT THERMAL 
CONTROL. MAY 1973.) 
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